SC-100 Practice Question 4026
Exam: SC-100
Domain: Design security solutions for applications and data
Difficulty: easy
You are designing a database masking architecture for customer support representatives who query production customer tables. Support staff must see only the last four digits of credit card numbers without altering stored data on disk. What should you configure?
Answer Options
A
Dynamic Data Masking (DDM) in Azure SQL Database
B
Hardcoding masked values into production database tables
C
Deleting the first 12 digits of credit card numbers from disks
D
Encrypting database disks with BitLocker
Correct Answer
A: Dynamic Data Masking (DDM) in Azure SQL Database
Explanation
Dynamic Data Masking (DDM) in Azure SQL Database masks sensitive data on-the-fly in query results based on user identity, without modifying underlying stored records.